AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Currently Amended) A method comprising: 

reading from a firsLsoftware module a set of keys associated with a trusted 
source, wherein the set of keys is embedded in the .-i software module; 

determining whether a key ^.nO o"v\o ^ " ^ ^ \ ^ o ^ 

is traceable to one of the keys in the set of keys; 

determining whether the key is identified in a list of compromised keys; and 

if the key is not identified as compromised and is traceable to one of the keys in 
the set of keys, assigning the key a trusted status. 

2. (Original) The method of claim 1 further comprising: 

verifying the integrity of a document comprising the key and the list of 
compromised keys. 

3. (Cancelled). 

4. (Previously Presented) The method of claim 1 in which determining whether the key 
is traceable to one of the keys in the set of keys further comprises: 

tracing the key through a certificate chain to one of the keys in the set of keys. 

5. (Currently Amended) The method of claim 1 further comprising: 

associating a document comprising the key and the set of keys with x 
software module comprising the set of keys using a hash of the jirst^software module in 
the document. 



IPN: P6764 



-2- 

Attorney's Docket No.: 11 6536-1 53402 
Application No.: 09/397,455 



6. (Original) Tlie nnetliod of claim 2 in which the document is a manifest signed by the 
key. 

7. (Original) The method of claim 1 in which determining whether the key is identified in 
the list of compromised keys further comprises: 

searching the list of compromised keys for the key. 

8. (Currently Amended) A method comprising: 

producing a document comprising an identification of a nrsi software module and 
a list of compromised keys; and 

digitally signing the document using a key ^-.nO to>" ; \ o ^ o 
.A.^ V. o \ ^ ^ traceable to one key of a set of keys, wherein the set of keys is 
embedded in the ^ software module. 

9. (Currently Amended) The method of claim 8 in which the identification of the ' c ' 
software module comprises a hash value of the ' .s^ software module. 

10. (Currently Amended) The method of claim 8 in which the key is traceable to one of 
the keys in the set of keys embedded in the flrilsoftware module by way of a certificate 
chain. 

1 1 . (Currently Amended) The method of claim 8 further comprising: 

making the document available on a communication network by which computer 
systems comprising the ;fireLsoftware module may read the document. 

12. (Cancelled). 

1 3. (Currently Amended) A device comprising: 

a processor; 

a machine-readable storage medium coupled to the processor by way of a bus, 
the storage medium storing instructions which, when executed by the processor, cause 
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the device to determine whether a key ^ \ v . 

\ ^ IS traceable to one l<ey of a set of l<eys associated with a trusted source; 

determine whether the l<ey is identified in a list of compromised keys; and 
if the key is not identified as compromised and is traceable to one of the 

keys in the set of keys, assign the key a trusted status. 

14. (Previously Presented) The device of claim 13 in which the instructions, when 
executed by the device, further cause the device to: 

verify the integrity of a document comprising the key and the list of compromised 

keys. 

1 5. (Currently Amended) The device of claim 1 3 further comprising a ^ ^-•'^ software 
module comprising the feteet of keys. 

16. (Previously Presented) The device of claim 13 in which the instructions, when 
executed by the device, further cause the device to: 

trace the key through a certificate chain to one of the keys in the set of keys. 

1 7. (Currently Amended) A device comprising: 

a processor; 

a machine-readable storage medium coupled to the processor by way of a bus, 
the storage medium storing instructions which, when executed by the processor, cause 
the device to: 

produce a document comprising an identification of a firsts software module 
and a list of compromised keys; and 

digitally sign the document using a key ^ ^ o o 

> ^v- tw.^ ^ 0 traceable to one key of a set of keys, wherein the set of 
keys is embedded in the ' software module. 
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18. (Currently Amended) The device of claim 1 7 in which the identification of the first 
software module comprises a hash value of the firstsoftware module. 

1 9. (Currently Amended) The device of claim 1 7 in which the key is traceable to one of 
the keys in the set of keys embedded in the fjrst^software module by way of a certificate 
chain. 

20. (Currently Amended) An article comprising a machine-readable medium having 
stored thereon instructions which, when executed by a processor, result in: 

reading from a Urst. software module a set of keys associated with a trusted 
source, wherein the set of keys is embedded in the th st software module; 

determining whether a key , ^ v\ o -.^■^ ^ .^.^--.ov . - 
is traceable to one of the keys in the set of keys; 

determining whether the key is identified in a list of compromised keys; and 

if the key is not identified as compromised and is traceable to one of keys in the 
set of keys, assigning the key a trusted status. 

21 . (Previously Presented) The article of claim 20 in which the instructions, when 
executed by the processor, further result in: 

verifying the integrity of a document comprising the key and the list of 
compromised keys. 

22. (Cancelled). 

23. (Previously Presented) The article of claim 20 in which the sequence of instructions, 
when executed by the processor, further result in: 

tracing the key through a certificate chain to one of the keys in the set of keys. 

24. (Currently Amended) An article comprising a machine-readable medium having 
stored thereon instructions which, when executed by a processor, result in: 
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producing a document comprising an identification of a iirsi software module and 
a list of compromised keys; and 

digitally signing the document using a key , ^ v o - ^ 

V A 0 \ 0 " traceable to one key of a set of keys, wherein the set of keys is 
embedded in the lirsi software module. 

25. (Currently Amended) The article of claim 24 in which the identification of the ^ 
software module comprises a hash value of the ' c software module. 

26. (Currently Amended) The article of claim 24 in which the key is traceable by way of 
a certificate chain to one of the keys in the set of keys embedded in the ' c:t software 
module. 
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